General
-
Target
60cceaa656d2c709986c4769b562dfd0945fd3acccae82390ee48759a66718e5
-
Size
265KB
-
Sample
240417-rcqhqaah94
-
MD5
da4485ee1292fb3de929de0dc01dc503
-
SHA1
8fc9e19f3f7c3a4a7acc8d210990023892b64698
-
SHA256
60cceaa656d2c709986c4769b562dfd0945fd3acccae82390ee48759a66718e5
-
SHA512
f5e4067866ee58af39ae864d09ad0a2e89ee751b755c363adbc29393cbe2a596a296695b5bd2b43fb3a06cadead9b6d1c86a5b795534a72191f099e7837afc75
-
SSDEEP
6144:HEyHHKOP9vqhtRBdI57Mw89dQjRs923B2JSZAeHaq:HEIHFB+ty6dSRsIxsocq
Malware Config
Extracted
remcos
Acople
teamadmin.duckdns.org:22041
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
gwinsadmin.exe
-
copy_folder
EuYHkOP
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
install_path
%AppData%
-
keylog_crypt
false
-
keylog_file
regist.dat
-
keylog_flag
false
-
keylog_folder
2240
-
mouse_option
false
-
mutex
-5LSOBH
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Capturas de pantalla
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
73c346f861980b8ecaca38c915e2b35a9df94b1054b4d9db8afe4ae609d2eabe.exe
-
Size
483KB
-
MD5
11aaf660295ff15db27f1a6c9befbfd4
-
SHA1
0db530e01d3cc0668d9b1113b7aaaa8cf8f00f63
-
SHA256
73c346f861980b8ecaca38c915e2b35a9df94b1054b4d9db8afe4ae609d2eabe
-
SHA512
072d78b97c7cc942ce81022287d6e903c5898708bf70a73da43f74a51997be060d62743b8fee7842d7542249079cb359c0834e9a04c1235dfa47980cd28ce39f
-
SSDEEP
6144:8XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNSo5Gv:8X7tPMK8ctGe4Dzl4h2QnuPs/ZsQcv
Score1/10 -